AstraLifeV2_64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AstraLifeV2_64.exe
Size

71.5MB
MD5

57065e7a8ed9d627ad865431d268ea14
SHA1

ba17430773036f04c06ebabec61ce10f5bbbd2a8
SHA256

ab338f222ade454ff28b3dc42f3d3ee63f33b237a47aba070b959b826b1cbf96
SHA512

0df345a5b33882f3939b993efd0d90e04628fcfc7659c344e63ff5147358b5cc3c8461c3bb5588db2a7ae808c9943f6ba96fce710f64ace11b2ec3bcdb954304
SSDEEP

1572864:BWJlx1FUaMZM+0Q9E9gdfP/UnmBvhM9ZbbZGD7LAlRTE:Olx8O+0QfP/KmBvIZb4D7LA/E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AstraLifeV2_64.exe

Files

AstraLifeV2_64.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ